monitoring on token generation and validation